On the public citation graph

DNS tunneling detection through statistical fingerprints of protocol messages and machine learning

https://doi.org/10.1002/dac.2836
0 signed · 88 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1002/dac.1141openalex-snapshot
Monitoring unauthorized internet accesses through a ‘honeypot’ system
inferredcites →https://doi.org/10.1002/dac.1142openalex-snapshot
On the identification and analysis of Skype traffic
inferredcites →https://doi.org/10.1002/dac.1169openalex-snapshot
An efficient identity‐based protocol for private matching
inferredcites →https://doi.org/10.1002/dac.1289openalex-snapshot
Effective allied network security system based on designed scheme with conditional legitimate probability against distributed network attacks and intrusions
inferredcites →https://doi.org/10.1002/dac.2356openalex-snapshot
6LoWPAN: a study on QoS security threats and countermeasures using intrusion detection system approach
inferredcites →https://doi.org/10.1002/dac.2432openalex-snapshot
Improving PCA‐based anomaly detection by using multiple time scale analysis and Kullback–Leibler divergence
inferredcites →https://doi.org/10.1002/dac.694openalex-snapshot
Detecting and classifying delay Data Exceptions on communication networks using rule based algorithms
inferredcites →https://doi.org/10.1002/dac.885openalex-snapshot
Efficient packet classification on network processors
inferredcites →https://doi.org/10.1002/dac.895openalex-snapshot
Intrusion detection and tolerance: A global scheme
inferredcites →https://doi.org/10.1002/dac.v21:1openalex-snapshot
inferredcites →https://doi.org/10.1007/978-3-540-73614-1_9openalex-snapshot
Characterizing Dark DNS Behavior
inferredcites →https://doi.org/10.1007/978-3-642-21323-6_11openalex-snapshot
A Comparative Performance Evaluation of DNS Tunneling Tools
inferredcites →https://doi.org/10.1007/978-3-642-38998-6_16openalex-snapshot
Flow-Based Detection of DNS Tunnels
inferredcites →https://doi.org/10.1007/s10044-002-0173-7openalex-snapshot
Limits on the majority vote accuracy in classifier fusion
inferredcites →https://doi.org/10.1016/j.comnet.2008.09.010openalex-snapshot
Tunnel Hunter: Detecting application-layer tunnels with statistical fingerprinting
inferredcites →https://doi.org/10.1016/j.comnet.2008.11.016openalex-snapshot
Efficient Application Identification and the Temporal Stability of Classification Schema
inferredcites →https://doi.org/10.1016/j.comnet.2010.12.002openalex-snapshot
Can encrypted traffic be identified without port numbers, IP addresses and payload inspection?
inferredcites →https://doi.org/10.1016/j.procs.2013.05.109openalex-snapshot
A Bigram based Real Time DNS Tunnel Detection Approach
inferredcites →https://doi.org/10.1109/glocom.2006.280openalex-snapshot
NIS04-2: Detection of DNS Anomalies using Flow Data Analysis
inferredcites →https://doi.org/10.1109/iscc.2013.6755058openalex-snapshot
Detection of Fast-Flux Networks using various DNS feature sets
inferredcites →https://doi.org/10.1109/iscc.2013.6755060openalex-snapshot
Basic classifiers for DNS tunneling detection
inferredcites →https://doi.org/10.1109/surv.2010.032210.00054openalex-snapshot
An Overview of IP Flow-Based Intrusion Detection
inferredcites →https://doi.org/10.1145/1064212.1064220openalex-snapshot
Internet traffic classification using bayesian analysis techniques
inferredcites →https://doi.org/10.1145/1071690.1064220openalex-snapshot
Internet traffic classification using bayesian analysis techniques
inferredcites →https://doi.org/10.1145/1163593.1163596openalex-snapshot
A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification
inferredcites →https://doi.org/10.1214/aos/1176342377openalex-snapshot
Statistical Inference in Bernoulli Trials with Dependence
inferredcites →https://doi.org/10.48550/arxiv.1004.4358openalex-snapshot
Detecting DNS Tunnels Using Character Frequency Analysis

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1002/dac.3225openalex-snapshot
Statistical fingerprint‐based intrusion detection system (SF‐IDS)
inferred← citeshttps://doi.org/10.1002/itl2.85openalex-snapshot
Unsupervised learning and rule extraction for Domain Name Server tunneling detection
inferred← citeshttps://doi.org/10.1007/978-3-030-24907-6_33openalex-snapshot
Detection of Application-Layer Tunnels with Rules and Machine Learning
inferred← citeshttps://doi.org/10.1007/978-3-032-32578-5_9openalex-snapshot
Adversarial DNS Exfiltration: Framework and Defense Evaluation
inferred← citeshttps://doi.org/10.1007/978-3-319-67380-6_26openalex-snapshot
DNS Tunneling Detection Techniques – Classification, and Theoretical Comparison in Case of a Real APT Campaign
inferred← citeshttps://doi.org/10.1007/978-981-13-6031-2_21openalex-snapshot
A Review of Botnet Detection Approaches Based on DNS Traffic Analysis
inferred← citeshttps://doi.org/10.1007/978-981-97-7710-5_40openalex-snapshot
Domain Name Server Filtering Service Using Threat Intelligence and Machine Learning Techniques
inferred← citeshttps://doi.org/10.1007/s00521-015-2128-0openalex-snapshot
A survey of botnet detection based on DNS
inferred← citeshttps://doi.org/10.1007/s10207-026-01290-6openalex-snapshot
Automated threat defense: a comprehensive survey on red and blue team automation using machine learning techniques
inferred← citeshttps://doi.org/10.1007/s10994-024-06571-6openalex-snapshot
Conformal predictions for probabilistically robust scalable machine learning classification
inferred← citeshttps://doi.org/10.1007/s11042-023-16956-9openalex-snapshot
An ensemble framework for detection of DNS-Over-HTTPS (DOH) traffic
inferred← citeshttps://doi.org/10.1007/s12243-024-01025-5openalex-snapshot
AutoRoC-DBSCAN: automatic tuning of DBSCAN to detect malicious DNS tunnels
inferred← citeshttps://doi.org/10.1016/j.comnet.2020.107187openalex-snapshot
The named data networking flow filter: Towards improved security over information leakage attacks
inferred← citeshttps://doi.org/10.1016/j.cose.2020.102095openalex-snapshot
DNS covert channel detection method using the LSTM model
inferred← citeshttps://doi.org/10.1016/j.cose.2022.102818openalex-snapshot
KRTunnel: DNS channel detector for mobile devices
inferred← citeshttps://doi.org/10.1016/j.cose.2023.103132openalex-snapshot
FECC: DNS tunnel detection model based on CNN and clustering
inferred← citeshttps://doi.org/10.1016/j.cose.2023.103357openalex-snapshot
DNS tunnelling detection by fusing encoding feature and behavioral feature
inferred← citeshttps://doi.org/10.1016/j.eswa.2018.02.010openalex-snapshot
Learning communication patterns for malware discovery in HTTPs data
inferred← citeshttps://doi.org/10.1016/j.ipm.2022.102930openalex-snapshot
DNS tunnels detection via DNS-images
inferred← citeshttps://doi.org/10.1016/j.patcog.2025.112219openalex-snapshot
A novel score function for conformal prediction in rule-based binary classification
inferred← citeshttps://doi.org/10.1080/23742917.2024.2399389openalex-snapshot
An investigation on cyber espionage ecosystem
inferred← citeshttps://doi.org/10.1093/jigpal/jzw056openalex-snapshot
Profiling DNS tunneling attacks with PCA and mutual information
inferred← citeshttps://doi.org/10.1109/access.2018.2877792openalex-snapshot
Name Filter: A Countermeasure Against Information Leakage Attacks in Named Data Networking
inferred← citeshttps://doi.org/10.1109/access.2021.3085500openalex-snapshot
Application Behavior Identification in DNS Tunnels Based on Spatial-Temporal Information
inferred← citeshttps://doi.org/10.1109/access.2021.3099642openalex-snapshot
Exploiting Internet of Things Protocols for Malicious Data Exfiltration Activities
inferred← citeshttps://doi.org/10.1109/access.2022.3197299openalex-snapshot
eXplainable and Reliable Against Adversarial Machine Learning in Data Analytics
inferred← citeshttps://doi.org/10.1109/comst.2021.3093492openalex-snapshot
Content Delivery Network Security: A Survey
inferred← citeshttps://doi.org/10.1109/ecrime47957.2019.9037595openalex-snapshot
Below the Radar: Spotting DNS Tunnels in Newly Observed Hostnames in the Wild
inferred← citeshttps://doi.org/10.1109/icc40277.2020.9149162openalex-snapshot
TDAE: Autoencoder-based Automatic Feature Learning Method for the Detection of DNS tunnel
inferred← citeshttps://doi.org/10.1109/icecct56650.2023.10179803openalex-snapshot
Detection of Communication Tunnels in Network Using DNS Logs
inferred← citeshttps://doi.org/10.1109/icict48043.2020.9112413openalex-snapshot
DNS Amplification & DNS Tunneling Attacks Simulation, Detection and Mitigation Approaches
inferred← citeshttps://doi.org/10.1109/icin48450.2020.9059472openalex-snapshot
Cache-Property-Aware Features for DNS Tunneling Detection
inferred← citeshttps://doi.org/10.1109/icisct52966.2021.9670269openalex-snapshot
A model for preventing malicious traffic in DNS servers using machine learning
inferred← citeshttps://doi.org/10.1109/icoin53446.2022.9687157openalex-snapshot
Detection of DoH Tunneling using Semi-supervised Learning method
inferred← citeshttps://doi.org/10.1109/icsc53193.2021.9673380openalex-snapshot
Detection of Tunneling in DNS over HTTPS
inferred← citeshttps://doi.org/10.1109/icufn.2016.7536939openalex-snapshot
Feature transformation and Mutual Information for DNS tunneling analysis
inferred← citeshttps://doi.org/10.1109/imitec50163.2020.9334104openalex-snapshot
An Analysis of the Use of DNS for Malicious Payload Distribution
inferred← citeshttps://doi.org/10.1109/infocomwkshps54753.2022.9797955openalex-snapshot
On The Detection Of Adversarial Attacks Through Reliable AI
inferred← citeshttps://doi.org/10.1109/mis.2021.3123669openalex-snapshot
A New SVDD Approach to Reliable and Explainable AI
inferred← citeshttps://doi.org/10.1109/tai.2023.3323923openalex-snapshot
Rule-Based Out-of-Distribution Detection
inferred← citeshttps://doi.org/10.1109/tifs.2017.2768018openalex-snapshot
Network Traffic Fingerprinting Based on Approximated Kernel Two-Sample Test
inferred← citeshttps://doi.org/10.1109/tnsm.2021.3078428openalex-snapshot
DNS Tunneling Detection by Cache-Property-Aware Features
inferred← citeshttps://doi.org/10.1109/trustcom66490.2025.00218openalex-snapshot
DoNotSurf - Low-Latency DNS IP Tunneling
inferred← citeshttps://doi.org/10.1145/2897795.2897804openalex-snapshot
Detection of Tunnels in PCAP Data by Random Forests
inferred← citeshttps://doi.org/10.1145/3477997.3478007openalex-snapshot
A Statistical Approach to Detecting Low-Throughput Exfiltration through the Domain Name System Protocol
inferred← citeshttps://doi.org/10.1155/2018/6137098openalex-snapshot
DNS Tunneling Detection Method Based on Multilabel Support Vector Machine
inferred← citeshttps://doi.org/10.11591/ijece.v11i2.pp1666-1674openalex-snapshot
A hybrid method of genetic algorithm and support vector machine for DNS tunneling detection
inferred← citeshttps://doi.org/10.12677/csa.2021.116187openalex-snapshot
Toward DNS-Based Covert Channel Detection Using Subdomain Context Relation
inferred← citeshttps://doi.org/10.14419/ijet.v7i3.20.17266openalex-snapshot
DNS Tunneling: a Review on Features
inferred← citeshttps://doi.org/10.23919/itc.2017.8065806openalex-snapshot
Support Vector Machine Meets Software Defined Networking in IDS Domain
inferred← citeshttps://doi.org/10.32604/cmc.2022.022540openalex-snapshot
ICMPTend: Internet Control Message Protocol Covert Tunnel Attack Intent Detector
inferred← citeshttps://doi.org/10.3390/app12052416openalex-snapshot
DoH Tunneling Detection System for Enterprise Network Using Deep Learning Technique
inferred← citeshttps://doi.org/10.3390/computers14090375openalex-snapshot
Rule-Based eXplainable Autoencoder for DNS Tunneling Detection
inferred← citeshttps://doi.org/10.3990/1.9789036548243openalex-snapshot
Detection and Evaluation of Data Exfiltration
inferred← citeshttps://doi.org/10.4218/etrij.2019-0299openalex-snapshot
Refined identification of hybrid traffic in DNS tunnels based on regression analysis
inferred← citeshttps://doi.org/10.4304/jnw.10.4.240-251openalex-snapshot
Evaluation of the Energy Consumption Introduced by a Trust Management Scheme on Mobile Ad-hoc Networks
inferred← citeshttps://doi.org/10.4316/aece.2021.03005openalex-snapshot
Deep Learning Based DNS Tunneling Detection and Blocking System
inferred← citeshttps://doi.org/10.48550/arxiv.1902.08454openalex-snapshot
A Study of Newly Observed Hostnames and DNS Tunneling in the Wild
inferred← citeshttps://doi.org/10.48550/arxiv.2010.01582openalex-snapshot
DNS Covert Channel Detection via Behavioral Analysis: a Machine Learning Approach
inferred← citeshttps://doi.org/10.70675/24c12964zc3a5z400ezb6aaz31313e070227openalex-snapshot
Apprentissage automatique non supervisé pour la détection de trafics illégitimes
inferred← citeshttps://doi.org/10.70675/82c9964az3adbz4db4za6e7zc14d068fc1dcopenalex-snapshot
Preventing information leakage in NDN with name and flow filters
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.